1 /* SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note */ 2 #ifndef _ASM_X86_KVM_H 3 #define _ASM_X86_KVM_H 4 5 /* 6 * KVM x86 specific structures and definitions 7 * 8 */ 9 10 #include <linux/const.h> 11 #include <linux/bits.h> 12 #include <linux/types.h> 13 #include <linux/ioctl.h> 14 #include <linux/stddef.h> 15 16 #define KVM_PIO_PAGE_OFFSET 1 17 #define KVM_COALESCED_MMIO_PAGE_OFFSET 2 18 #define KVM_DIRTY_LOG_PAGE_OFFSET 64 19 20 #define DE_VECTOR 0 21 #define DB_VECTOR 1 22 #define BP_VECTOR 3 23 #define OF_VECTOR 4 24 #define BR_VECTOR 5 25 #define UD_VECTOR 6 26 #define NM_VECTOR 7 27 #define DF_VECTOR 8 28 #define TS_VECTOR 10 29 #define NP_VECTOR 11 30 #define SS_VECTOR 12 31 #define GP_VECTOR 13 32 #define PF_VECTOR 14 33 #define MF_VECTOR 16 34 #define AC_VECTOR 17 35 #define MC_VECTOR 18 36 #define XM_VECTOR 19 37 #define VE_VECTOR 20 38 39 /* Select x86 specific features in <linux/kvm.h> */ 40 #define __KVM_HAVE_PIT 41 #define __KVM_HAVE_IOAPIC 42 #define __KVM_HAVE_IRQ_LINE 43 #define __KVM_HAVE_MSI 44 #define __KVM_HAVE_USER_NMI 45 #define __KVM_HAVE_MSIX 46 #define __KVM_HAVE_MCE 47 #define __KVM_HAVE_PIT_STATE2 48 #define __KVM_HAVE_XEN_HVM 49 #define __KVM_HAVE_VCPU_EVENTS 50 #define __KVM_HAVE_DEBUGREGS 51 #define __KVM_HAVE_XSAVE 52 #define __KVM_HAVE_XCRS 53 54 /* Architectural interrupt line count. */ 55 #define KVM_NR_INTERRUPTS 256 56 57 /* for KVM_GET_IRQCHIP and KVM_SET_IRQCHIP */ 58 struct kvm_pic_state { 59 __u8 last_irr; /* edge detection */ 60 __u8 irr; /* interrupt request register */ 61 __u8 imr; /* interrupt mask register */ 62 __u8 isr; /* interrupt service register */ 63 __u8 priority_add; /* highest irq priority */ 64 __u8 irq_base; 65 __u8 read_reg_select; 66 __u8 poll; 67 __u8 special_mask; 68 __u8 init_state; 69 __u8 auto_eoi; 70 __u8 rotate_on_auto_eoi; 71 __u8 special_fully_nested_mode; 72 __u8 init4; /* true if 4 byte init */ 73 __u8 elcr; /* PIIX edge/trigger selection */ 74 __u8 elcr_mask; 75 }; 76 77 #define KVM_IOAPIC_NUM_PINS 24 78 struct kvm_ioapic_state { 79 __u64 base_address; 80 __u32 ioregsel; 81 __u32 id; 82 __u32 irr; 83 __u32 pad; 84 union { 85 __u64 bits; 86 struct { 87 __u8 vector; 88 __u8 delivery_mode:3; 89 __u8 dest_mode:1; 90 __u8 delivery_status:1; 91 __u8 polarity:1; 92 __u8 remote_irr:1; 93 __u8 trig_mode:1; 94 __u8 mask:1; 95 __u8 reserve:7; 96 __u8 reserved[4]; 97 __u8 dest_id; 98 } fields; 99 } redirtbl[KVM_IOAPIC_NUM_PINS]; 100 }; 101 102 #define KVM_IRQCHIP_PIC_MASTER 0 103 #define KVM_IRQCHIP_PIC_SLAVE 1 104 #define KVM_IRQCHIP_IOAPIC 2 105 #define KVM_NR_IRQCHIPS 3 106 107 #define KVM_RUN_X86_SMM (1 << 0) 108 #define KVM_RUN_X86_BUS_LOCK (1 << 1) 109 #define KVM_RUN_X86_GUEST_MODE (1 << 2) 110 111 /* for KVM_GET_REGS and KVM_SET_REGS */ 112 struct kvm_regs { 113 /* out (KVM_GET_REGS) / in (KVM_SET_REGS) */ 114 __u64 rax, rbx, rcx, rdx; 115 __u64 rsi, rdi, rsp, rbp; 116 __u64 r8, r9, r10, r11; 117 __u64 r12, r13, r14, r15; 118 __u64 rip, rflags; 119 }; 120 121 /* for KVM_GET_LAPIC and KVM_SET_LAPIC */ 122 #define KVM_APIC_REG_SIZE 0x400 123 struct kvm_lapic_state { 124 char regs[KVM_APIC_REG_SIZE]; 125 }; 126 127 struct kvm_segment { 128 __u64 base; 129 __u32 limit; 130 __u16 selector; 131 __u8 type; 132 __u8 present, dpl, db, s, l, g, avl; 133 __u8 unusable; 134 __u8 padding; 135 }; 136 137 struct kvm_dtable { 138 __u64 base; 139 __u16 limit; 140 __u16 padding[3]; 141 }; 142 143 144 /* for KVM_GET_SREGS and KVM_SET_SREGS */ 145 struct kvm_sregs { 146 /* out (KVM_GET_SREGS) / in (KVM_SET_SREGS) */ 147 struct kvm_segment cs, ds, es, fs, gs, ss; 148 struct kvm_segment tr, ldt; 149 struct kvm_dtable gdt, idt; 150 __u64 cr0, cr2, cr3, cr4, cr8; 151 __u64 efer; 152 __u64 apic_base; 153 __u64 interrupt_bitmap[(KVM_NR_INTERRUPTS + 63) / 64]; 154 }; 155 156 struct kvm_sregs2 { 157 /* out (KVM_GET_SREGS2) / in (KVM_SET_SREGS2) */ 158 struct kvm_segment cs, ds, es, fs, gs, ss; 159 struct kvm_segment tr, ldt; 160 struct kvm_dtable gdt, idt; 161 __u64 cr0, cr2, cr3, cr4, cr8; 162 __u64 efer; 163 __u64 apic_base; 164 __u64 flags; 165 __u64 pdptrs[4]; 166 }; 167 #define KVM_SREGS2_FLAGS_PDPTRS_VALID 1 168 169 /* for KVM_GET_FPU and KVM_SET_FPU */ 170 struct kvm_fpu { 171 __u8 fpr[8][16]; 172 __u16 fcw; 173 __u16 fsw; 174 __u8 ftwx; /* in fxsave format */ 175 __u8 pad1; 176 __u16 last_opcode; 177 __u64 last_ip; 178 __u64 last_dp; 179 __u8 xmm[16][16]; 180 __u32 mxcsr; 181 __u32 pad2; 182 }; 183 184 struct kvm_msr_entry { 185 __u32 index; 186 __u32 reserved; 187 __u64 data; 188 }; 189 190 /* for KVM_GET_MSRS and KVM_SET_MSRS */ 191 struct kvm_msrs { 192 __u32 nmsrs; /* number of msrs in entries */ 193 __u32 pad; 194 195 struct kvm_msr_entry entries[]; 196 }; 197 198 /* for KVM_GET_MSR_INDEX_LIST */ 199 struct kvm_msr_list { 200 __u32 nmsrs; /* number of msrs in entries */ 201 __u32 indices[]; 202 }; 203 204 /* Maximum size of any access bitmap in bytes */ 205 #define KVM_MSR_FILTER_MAX_BITMAP_SIZE 0x600 206 207 /* for KVM_X86_SET_MSR_FILTER */ 208 struct kvm_msr_filter_range { 209 #define KVM_MSR_FILTER_READ (1 << 0) 210 #define KVM_MSR_FILTER_WRITE (1 << 1) 211 #define KVM_MSR_FILTER_RANGE_VALID_MASK (KVM_MSR_FILTER_READ | \ 212 KVM_MSR_FILTER_WRITE) 213 __u32 flags; 214 __u32 nmsrs; /* number of msrs in bitmap */ 215 __u32 base; /* MSR index the bitmap starts at */ 216 __u8 *bitmap; /* a 1 bit allows the operations in flags, 0 denies */ 217 }; 218 219 #define KVM_MSR_FILTER_MAX_RANGES 16 220 struct kvm_msr_filter { 221 #ifndef __KERNEL__ 222 #define KVM_MSR_FILTER_DEFAULT_ALLOW (0 << 0) 223 #endif 224 #define KVM_MSR_FILTER_DEFAULT_DENY (1 << 0) 225 #define KVM_MSR_FILTER_VALID_MASK (KVM_MSR_FILTER_DEFAULT_DENY) 226 __u32 flags; 227 struct kvm_msr_filter_range ranges[KVM_MSR_FILTER_MAX_RANGES]; 228 }; 229 230 struct kvm_cpuid_entry { 231 __u32 function; 232 __u32 eax; 233 __u32 ebx; 234 __u32 ecx; 235 __u32 edx; 236 __u32 padding; 237 }; 238 239 /* for KVM_SET_CPUID */ 240 struct kvm_cpuid { 241 __u32 nent; 242 __u32 padding; 243 struct kvm_cpuid_entry entries[]; 244 }; 245 246 struct kvm_cpuid_entry2 { 247 __u32 function; 248 __u32 index; 249 __u32 flags; 250 __u32 eax; 251 __u32 ebx; 252 __u32 ecx; 253 __u32 edx; 254 __u32 padding[3]; 255 }; 256 257 #define KVM_CPUID_FLAG_SIGNIFCANT_INDEX (1 << 0) 258 #define KVM_CPUID_FLAG_STATEFUL_FUNC (1 << 1) 259 #define KVM_CPUID_FLAG_STATE_READ_NEXT (1 << 2) 260 261 /* for KVM_SET_CPUID2 */ 262 struct kvm_cpuid2 { 263 __u32 nent; 264 __u32 padding; 265 struct kvm_cpuid_entry2 entries[]; 266 }; 267 268 /* for KVM_GET_PIT and KVM_SET_PIT */ 269 struct kvm_pit_channel_state { 270 __u32 count; /* can be 65536 */ 271 __u16 latched_count; 272 __u8 count_latched; 273 __u8 status_latched; 274 __u8 status; 275 __u8 read_state; 276 __u8 write_state; 277 __u8 write_latch; 278 __u8 rw_mode; 279 __u8 mode; 280 __u8 bcd; 281 __u8 gate; 282 __s64 count_load_time; 283 }; 284 285 struct kvm_debug_exit_arch { 286 __u32 exception; 287 __u32 pad; 288 __u64 pc; 289 __u64 dr6; 290 __u64 dr7; 291 }; 292 293 #define KVM_GUESTDBG_USE_SW_BP 0x00010000 294 #define KVM_GUESTDBG_USE_HW_BP 0x00020000 295 #define KVM_GUESTDBG_INJECT_DB 0x00040000 296 #define KVM_GUESTDBG_INJECT_BP 0x00080000 297 #define KVM_GUESTDBG_BLOCKIRQ 0x00100000 298 299 /* for KVM_SET_GUEST_DEBUG */ 300 struct kvm_guest_debug_arch { 301 __u64 debugreg[8]; 302 }; 303 304 struct kvm_pit_state { 305 struct kvm_pit_channel_state channels[3]; 306 }; 307 308 #define KVM_PIT_FLAGS_HPET_LEGACY 0x00000001 309 #define KVM_PIT_FLAGS_SPEAKER_DATA_ON 0x00000002 310 311 struct kvm_pit_state2 { 312 struct kvm_pit_channel_state channels[3]; 313 __u32 flags; 314 __u32 reserved[9]; 315 }; 316 317 struct kvm_reinject_control { 318 __u8 pit_reinject; 319 __u8 reserved[31]; 320 }; 321 322 /* When set in flags, include corresponding fields on KVM_SET_VCPU_EVENTS */ 323 #define KVM_VCPUEVENT_VALID_NMI_PENDING 0x00000001 324 #define KVM_VCPUEVENT_VALID_SIPI_VECTOR 0x00000002 325 #define KVM_VCPUEVENT_VALID_SHADOW 0x00000004 326 #define KVM_VCPUEVENT_VALID_SMM 0x00000008 327 #define KVM_VCPUEVENT_VALID_PAYLOAD 0x00000010 328 #define KVM_VCPUEVENT_VALID_TRIPLE_FAULT 0x00000020 329 330 /* Interrupt shadow states */ 331 #define KVM_X86_SHADOW_INT_MOV_SS 0x01 332 #define KVM_X86_SHADOW_INT_STI 0x02 333 334 /* for KVM_GET/SET_VCPU_EVENTS */ 335 struct kvm_vcpu_events { 336 struct { 337 __u8 injected; 338 __u8 nr; 339 __u8 has_error_code; 340 __u8 pending; 341 __u32 error_code; 342 } exception; 343 struct { 344 __u8 injected; 345 __u8 nr; 346 __u8 soft; 347 __u8 shadow; 348 } interrupt; 349 struct { 350 __u8 injected; 351 __u8 pending; 352 __u8 masked; 353 __u8 pad; 354 } nmi; 355 __u32 sipi_vector; 356 __u32 flags; 357 struct { 358 __u8 smm; 359 __u8 pending; 360 __u8 smm_inside_nmi; 361 __u8 latched_init; 362 } smi; 363 struct { 364 __u8 pending; 365 } triple_fault; 366 __u8 reserved[26]; 367 __u8 exception_has_payload; 368 __u64 exception_payload; 369 }; 370 371 /* for KVM_GET/SET_DEBUGREGS */ 372 struct kvm_debugregs { 373 __u64 db[4]; 374 __u64 dr6; 375 __u64 dr7; 376 __u64 flags; 377 __u64 reserved[9]; 378 }; 379 380 /* for KVM_CAP_XSAVE and KVM_CAP_XSAVE2 */ 381 struct kvm_xsave { 382 /* 383 * KVM_GET_XSAVE2 and KVM_SET_XSAVE write and read as many bytes 384 * as are returned by KVM_CHECK_EXTENSION(KVM_CAP_XSAVE2) 385 * respectively, when invoked on the vm file descriptor. 386 * 387 * The size value returned by KVM_CHECK_EXTENSION(KVM_CAP_XSAVE2) 388 * will always be at least 4096. Currently, it is only greater 389 * than 4096 if a dynamic feature has been enabled with 390 * ``arch_prctl()``, but this may change in the future. 391 * 392 * The offsets of the state save areas in struct kvm_xsave follow 393 * the contents of CPUID leaf 0xD on the host. 394 */ 395 __u32 region[1024]; 396 __u32 extra[]; 397 }; 398 399 #define KVM_MAX_XCRS 16 400 401 struct kvm_xcr { 402 __u32 xcr; 403 __u32 reserved; 404 __u64 value; 405 }; 406 407 struct kvm_xcrs { 408 __u32 nr_xcrs; 409 __u32 flags; 410 struct kvm_xcr xcrs[KVM_MAX_XCRS]; 411 __u64 padding[16]; 412 }; 413 414 #define KVM_SYNC_X86_REGS (1UL << 0) 415 #define KVM_SYNC_X86_SREGS (1UL << 1) 416 #define KVM_SYNC_X86_EVENTS (1UL << 2) 417 418 #define KVM_SYNC_X86_VALID_FIELDS \ 419 (KVM_SYNC_X86_REGS| \ 420 KVM_SYNC_X86_SREGS| \ 421 KVM_SYNC_X86_EVENTS) 422 423 /* kvm_sync_regs struct included by kvm_run struct */ 424 struct kvm_sync_regs { 425 /* Members of this structure are potentially malicious. 426 * Care must be taken by code reading, esp. interpreting, 427 * data fields from them inside KVM to prevent TOCTOU and 428 * double-fetch types of vulnerabilities. 429 */ 430 struct kvm_regs regs; 431 struct kvm_sregs sregs; 432 struct kvm_vcpu_events events; 433 }; 434 435 #define KVM_X86_QUIRK_LINT0_REENABLED (1 << 0) 436 #define KVM_X86_QUIRK_CD_NW_CLEARED (1 << 1) 437 #define KVM_X86_QUIRK_LAPIC_MMIO_HOLE (1 << 2) 438 #define KVM_X86_QUIRK_OUT_7E_INC_RIP (1 << 3) 439 #define KVM_X86_QUIRK_MISC_ENABLE_NO_MWAIT (1 << 4) 440 #define KVM_X86_QUIRK_FIX_HYPERCALL_INSN (1 << 5) 441 #define KVM_X86_QUIRK_MWAIT_NEVER_UD_FAULTS (1 << 6) 442 #define KVM_X86_QUIRK_SLOT_ZAP_ALL (1 << 7) 443 #define KVM_X86_QUIRK_STUFF_FEATURE_MSRS (1 << 8) 444 #define KVM_X86_QUIRK_IGNORE_GUEST_PAT (1 << 9) 445 446 #define KVM_STATE_NESTED_FORMAT_VMX 0 447 #define KVM_STATE_NESTED_FORMAT_SVM 1 448 449 #define KVM_STATE_NESTED_GUEST_MODE 0x00000001 450 #define KVM_STATE_NESTED_RUN_PENDING 0x00000002 451 #define KVM_STATE_NESTED_EVMCS 0x00000004 452 #define KVM_STATE_NESTED_MTF_PENDING 0x00000008 453 #define KVM_STATE_NESTED_GIF_SET 0x00000100 454 455 #define KVM_STATE_NESTED_SMM_GUEST_MODE 0x00000001 456 #define KVM_STATE_NESTED_SMM_VMXON 0x00000002 457 458 #define KVM_STATE_NESTED_VMX_VMCS_SIZE 0x1000 459 460 #define KVM_STATE_NESTED_SVM_VMCB_SIZE 0x1000 461 462 #define KVM_STATE_VMX_PREEMPTION_TIMER_DEADLINE 0x00000001 463 464 /* vendor-independent attributes for system fd (group 0) */ 465 #define KVM_X86_GRP_SYSTEM 0 466 # define KVM_X86_XCOMP_GUEST_SUPP 0 467 468 /* vendor-specific groups and attributes for system fd */ 469 #define KVM_X86_GRP_SEV 1 470 # define KVM_X86_SEV_VMSA_FEATURES 0 471 472 struct kvm_vmx_nested_state_data { 473 __u8 vmcs12[KVM_STATE_NESTED_VMX_VMCS_SIZE]; 474 __u8 shadow_vmcs12[KVM_STATE_NESTED_VMX_VMCS_SIZE]; 475 }; 476 477 struct kvm_vmx_nested_state_hdr { 478 __u64 vmxon_pa; 479 __u64 vmcs12_pa; 480 481 struct { 482 __u16 flags; 483 } smm; 484 485 __u16 pad; 486 487 __u32 flags; 488 __u64 preemption_timer_deadline; 489 }; 490 491 struct kvm_svm_nested_state_data { 492 /* Save area only used if KVM_STATE_NESTED_RUN_PENDING. */ 493 __u8 vmcb12[KVM_STATE_NESTED_SVM_VMCB_SIZE]; 494 }; 495 496 struct kvm_svm_nested_state_hdr { 497 __u64 vmcb_pa; 498 }; 499 500 /* for KVM_CAP_NESTED_STATE */ 501 struct kvm_nested_state { 502 __u16 flags; 503 __u16 format; 504 __u32 size; 505 506 union { 507 struct kvm_vmx_nested_state_hdr vmx; 508 struct kvm_svm_nested_state_hdr svm; 509 510 /* Pad the header to 128 bytes. */ 511 __u8 pad[120]; 512 } hdr; 513 514 /* 515 * Define data region as 0 bytes to preserve backwards-compatability 516 * to old definition of kvm_nested_state in order to avoid changing 517 * KVM_{GET,PUT}_NESTED_STATE ioctl values. 518 */ 519 union { 520 __DECLARE_FLEX_ARRAY(struct kvm_vmx_nested_state_data, vmx); 521 __DECLARE_FLEX_ARRAY(struct kvm_svm_nested_state_data, svm); 522 } data; 523 }; 524 525 /* for KVM_CAP_PMU_EVENT_FILTER */ 526 struct kvm_pmu_event_filter { 527 __u32 action; 528 __u32 nevents; 529 __u32 fixed_counter_bitmap; 530 __u32 flags; 531 __u32 pad[4]; 532 __u64 events[]; 533 }; 534 535 #define KVM_PMU_EVENT_ALLOW 0 536 #define KVM_PMU_EVENT_DENY 1 537 538 #define KVM_PMU_EVENT_FLAG_MASKED_EVENTS _BITUL(0) 539 #define KVM_PMU_EVENT_FLAGS_VALID_MASK (KVM_PMU_EVENT_FLAG_MASKED_EVENTS) 540 541 /* for KVM_CAP_MCE */ 542 struct kvm_x86_mce { 543 __u64 status; 544 __u64 addr; 545 __u64 misc; 546 __u64 mcg_status; 547 __u8 bank; 548 __u8 pad1[7]; 549 __u64 pad2[3]; 550 }; 551 552 /* for KVM_CAP_XEN_HVM */ 553 #define KVM_XEN_HVM_CONFIG_HYPERCALL_MSR (1 << 0) 554 #define KVM_XEN_HVM_CONFIG_INTERCEPT_HCALL (1 << 1) 555 #define KVM_XEN_HVM_CONFIG_SHARED_INFO (1 << 2) 556 #define KVM_XEN_HVM_CONFIG_RUNSTATE (1 << 3) 557 #define KVM_XEN_HVM_CONFIG_EVTCHN_2LEVEL (1 << 4) 558 #define KVM_XEN_HVM_CONFIG_EVTCHN_SEND (1 << 5) 559 #define KVM_XEN_HVM_CONFIG_RUNSTATE_UPDATE_FLAG (1 << 6) 560 #define KVM_XEN_HVM_CONFIG_PVCLOCK_TSC_UNSTABLE (1 << 7) 561 #define KVM_XEN_HVM_CONFIG_SHARED_INFO_HVA (1 << 8) 562 563 #define KVM_XEN_MSR_MIN_INDEX 0x40000000u 564 #define KVM_XEN_MSR_MAX_INDEX 0x4fffffffu 565 566 struct kvm_xen_hvm_config { 567 __u32 flags; 568 __u32 msr; 569 __u64 blob_addr_32; 570 __u64 blob_addr_64; 571 __u8 blob_size_32; 572 __u8 blob_size_64; 573 __u8 pad2[30]; 574 }; 575 576 struct kvm_xen_hvm_attr { 577 __u16 type; 578 __u16 pad[3]; 579 union { 580 __u8 long_mode; 581 __u8 vector; 582 __u8 runstate_update_flag; 583 union { 584 __u64 gfn; 585 #define KVM_XEN_INVALID_GFN ((__u64)-1) 586 __u64 hva; 587 } shared_info; 588 struct { 589 __u32 send_port; 590 __u32 type; /* EVTCHNSTAT_ipi / EVTCHNSTAT_interdomain */ 591 __u32 flags; 592 #define KVM_XEN_EVTCHN_DEASSIGN (1 << 0) 593 #define KVM_XEN_EVTCHN_UPDATE (1 << 1) 594 #define KVM_XEN_EVTCHN_RESET (1 << 2) 595 /* 596 * Events sent by the guest are either looped back to 597 * the guest itself (potentially on a different port#) 598 * or signalled via an eventfd. 599 */ 600 union { 601 struct { 602 __u32 port; 603 __u32 vcpu; 604 __u32 priority; 605 } port; 606 struct { 607 __u32 port; /* Zero for eventfd */ 608 __s32 fd; 609 } eventfd; 610 __u32 padding[4]; 611 } deliver; 612 } evtchn; 613 __u32 xen_version; 614 __u64 pad[8]; 615 } u; 616 }; 617 618 619 /* Available with KVM_CAP_XEN_HVM / KVM_XEN_HVM_CONFIG_SHARED_INFO */ 620 #define KVM_XEN_ATTR_TYPE_LONG_MODE 0x0 621 #define KVM_XEN_ATTR_TYPE_SHARED_INFO 0x1 622 #define KVM_XEN_ATTR_TYPE_UPCALL_VECTOR 0x2 623 /* Available with KVM_CAP_XEN_HVM / KVM_XEN_HVM_CONFIG_EVTCHN_SEND */ 624 #define KVM_XEN_ATTR_TYPE_EVTCHN 0x3 625 #define KVM_XEN_ATTR_TYPE_XEN_VERSION 0x4 626 /* Available with KVM_CAP_XEN_HVM / KVM_XEN_HVM_CONFIG_RUNSTATE_UPDATE_FLAG */ 627 #define KVM_XEN_ATTR_TYPE_RUNSTATE_UPDATE_FLAG 0x5 628 /* Available with KVM_CAP_XEN_HVM / KVM_XEN_HVM_CONFIG_SHARED_INFO_HVA */ 629 #define KVM_XEN_ATTR_TYPE_SHARED_INFO_HVA 0x6 630 631 struct kvm_xen_vcpu_attr { 632 __u16 type; 633 __u16 pad[3]; 634 union { 635 __u64 gpa; 636 #define KVM_XEN_INVALID_GPA ((__u64)-1) 637 __u64 hva; 638 __u64 pad[8]; 639 struct { 640 __u64 state; 641 __u64 state_entry_time; 642 __u64 time_running; 643 __u64 time_runnable; 644 __u64 time_blocked; 645 __u64 time_offline; 646 } runstate; 647 __u32 vcpu_id; 648 struct { 649 __u32 port; 650 __u32 priority; 651 __u64 expires_ns; 652 } timer; 653 __u8 vector; 654 } u; 655 }; 656 657 /* Available with KVM_CAP_XEN_HVM / KVM_XEN_HVM_CONFIG_SHARED_INFO */ 658 #define KVM_XEN_VCPU_ATTR_TYPE_VCPU_INFO 0x0 659 #define KVM_XEN_VCPU_ATTR_TYPE_VCPU_TIME_INFO 0x1 660 #define KVM_XEN_VCPU_ATTR_TYPE_RUNSTATE_ADDR 0x2 661 #define KVM_XEN_VCPU_ATTR_TYPE_RUNSTATE_CURRENT 0x3 662 #define KVM_XEN_VCPU_ATTR_TYPE_RUNSTATE_DATA 0x4 663 #define KVM_XEN_VCPU_ATTR_TYPE_RUNSTATE_ADJUST 0x5 664 /* Available with KVM_CAP_XEN_HVM / KVM_XEN_HVM_CONFIG_EVTCHN_SEND */ 665 #define KVM_XEN_VCPU_ATTR_TYPE_VCPU_ID 0x6 666 #define KVM_XEN_VCPU_ATTR_TYPE_TIMER 0x7 667 #define KVM_XEN_VCPU_ATTR_TYPE_UPCALL_VECTOR 0x8 668 /* Available with KVM_CAP_XEN_HVM / KVM_XEN_HVM_CONFIG_SHARED_INFO_HVA */ 669 #define KVM_XEN_VCPU_ATTR_TYPE_VCPU_INFO_HVA 0x9 670 671 /* Secure Encrypted Virtualization command */ 672 enum sev_cmd_id { 673 /* Guest initialization commands */ 674 KVM_SEV_INIT = 0, 675 KVM_SEV_ES_INIT, 676 /* Guest launch commands */ 677 KVM_SEV_LAUNCH_START, 678 KVM_SEV_LAUNCH_UPDATE_DATA, 679 KVM_SEV_LAUNCH_UPDATE_VMSA, 680 KVM_SEV_LAUNCH_SECRET, 681 KVM_SEV_LAUNCH_MEASURE, 682 KVM_SEV_LAUNCH_FINISH, 683 /* Guest migration commands (outgoing) */ 684 KVM_SEV_SEND_START, 685 KVM_SEV_SEND_UPDATE_DATA, 686 KVM_SEV_SEND_UPDATE_VMSA, 687 KVM_SEV_SEND_FINISH, 688 /* Guest migration commands (incoming) */ 689 KVM_SEV_RECEIVE_START, 690 KVM_SEV_RECEIVE_UPDATE_DATA, 691 KVM_SEV_RECEIVE_UPDATE_VMSA, 692 KVM_SEV_RECEIVE_FINISH, 693 /* Guest status and debug commands */ 694 KVM_SEV_GUEST_STATUS, 695 KVM_SEV_DBG_DECRYPT, 696 KVM_SEV_DBG_ENCRYPT, 697 /* Guest certificates commands */ 698 KVM_SEV_CERT_EXPORT, 699 /* Attestation report */ 700 KVM_SEV_GET_ATTESTATION_REPORT, 701 /* Guest Migration Extension */ 702 KVM_SEV_SEND_CANCEL, 703 704 /* Second time is the charm; improved versions of the above ioctls. */ 705 KVM_SEV_INIT2, 706 707 /* SNP-specific commands */ 708 KVM_SEV_SNP_LAUNCH_START = 100, 709 KVM_SEV_SNP_LAUNCH_UPDATE, 710 KVM_SEV_SNP_LAUNCH_FINISH, 711 712 KVM_SEV_NR_MAX, 713 }; 714 715 struct kvm_sev_cmd { 716 __u32 id; 717 __u32 pad0; 718 __u64 data; 719 __u32 error; 720 __u32 sev_fd; 721 }; 722 723 struct kvm_sev_init { 724 __u64 vmsa_features; 725 __u32 flags; 726 __u16 ghcb_version; 727 __u16 pad1; 728 __u32 pad2[8]; 729 }; 730 731 struct kvm_sev_launch_start { 732 __u32 handle; 733 __u32 policy; 734 __u64 dh_uaddr; 735 __u32 dh_len; 736 __u32 pad0; 737 __u64 session_uaddr; 738 __u32 session_len; 739 __u32 pad1; 740 }; 741 742 struct kvm_sev_launch_update_data { 743 __u64 uaddr; 744 __u32 len; 745 __u32 pad0; 746 }; 747 748 749 struct kvm_sev_launch_secret { 750 __u64 hdr_uaddr; 751 __u32 hdr_len; 752 __u32 pad0; 753 __u64 guest_uaddr; 754 __u32 guest_len; 755 __u32 pad1; 756 __u64 trans_uaddr; 757 __u32 trans_len; 758 __u32 pad2; 759 }; 760 761 struct kvm_sev_launch_measure { 762 __u64 uaddr; 763 __u32 len; 764 __u32 pad0; 765 }; 766 767 struct kvm_sev_guest_status { 768 __u32 handle; 769 __u32 policy; 770 __u32 state; 771 }; 772 773 struct kvm_sev_dbg { 774 __u64 src_uaddr; 775 __u64 dst_uaddr; 776 __u32 len; 777 __u32 pad0; 778 }; 779 780 struct kvm_sev_attestation_report { 781 __u8 mnonce[16]; 782 __u64 uaddr; 783 __u32 len; 784 __u32 pad0; 785 }; 786 787 struct kvm_sev_send_start { 788 __u32 policy; 789 __u32 pad0; 790 __u64 pdh_cert_uaddr; 791 __u32 pdh_cert_len; 792 __u32 pad1; 793 __u64 plat_certs_uaddr; 794 __u32 plat_certs_len; 795 __u32 pad2; 796 __u64 amd_certs_uaddr; 797 __u32 amd_certs_len; 798 __u32 pad3; 799 __u64 session_uaddr; 800 __u32 session_len; 801 __u32 pad4; 802 }; 803 804 struct kvm_sev_send_update_data { 805 __u64 hdr_uaddr; 806 __u32 hdr_len; 807 __u32 pad0; 808 __u64 guest_uaddr; 809 __u32 guest_len; 810 __u32 pad1; 811 __u64 trans_uaddr; 812 __u32 trans_len; 813 __u32 pad2; 814 }; 815 816 struct kvm_sev_receive_start { 817 __u32 handle; 818 __u32 policy; 819 __u64 pdh_uaddr; 820 __u32 pdh_len; 821 __u32 pad0; 822 __u64 session_uaddr; 823 __u32 session_len; 824 __u32 pad1; 825 }; 826 827 struct kvm_sev_receive_update_data { 828 __u64 hdr_uaddr; 829 __u32 hdr_len; 830 __u32 pad0; 831 __u64 guest_uaddr; 832 __u32 guest_len; 833 __u32 pad1; 834 __u64 trans_uaddr; 835 __u32 trans_len; 836 __u32 pad2; 837 }; 838 839 struct kvm_sev_snp_launch_start { 840 __u64 policy; 841 __u8 gosvw[16]; 842 __u16 flags; 843 __u8 pad0[6]; 844 __u64 pad1[4]; 845 }; 846 847 /* Kept in sync with firmware values for simplicity. */ 848 #define KVM_SEV_PAGE_TYPE_INVALID 0x0 849 #define KVM_SEV_SNP_PAGE_TYPE_NORMAL 0x1 850 #define KVM_SEV_SNP_PAGE_TYPE_ZERO 0x3 851 #define KVM_SEV_SNP_PAGE_TYPE_UNMEASURED 0x4 852 #define KVM_SEV_SNP_PAGE_TYPE_SECRETS 0x5 853 #define KVM_SEV_SNP_PAGE_TYPE_CPUID 0x6 854 855 struct kvm_sev_snp_launch_update { 856 __u64 gfn_start; 857 __u64 uaddr; 858 __u64 len; 859 __u8 type; 860 __u8 pad0; 861 __u16 flags; 862 __u32 pad1; 863 __u64 pad2[4]; 864 }; 865 866 #define KVM_SEV_SNP_ID_BLOCK_SIZE 96 867 #define KVM_SEV_SNP_ID_AUTH_SIZE 4096 868 #define KVM_SEV_SNP_FINISH_DATA_SIZE 32 869 870 struct kvm_sev_snp_launch_finish { 871 __u64 id_block_uaddr; 872 __u64 id_auth_uaddr; 873 __u8 id_block_en; 874 __u8 auth_key_en; 875 __u8 vcek_disabled; 876 __u8 host_data[KVM_SEV_SNP_FINISH_DATA_SIZE]; 877 __u8 pad0[3]; 878 __u16 flags; 879 __u64 pad1[4]; 880 }; 881 882 #define KVM_X2APIC_API_USE_32BIT_IDS (1ULL << 0) 883 #define KVM_X2APIC_API_DISABLE_BROADCAST_QUIRK (1ULL << 1) 884 885 struct kvm_hyperv_eventfd { 886 __u32 conn_id; 887 __s32 fd; 888 __u32 flags; 889 __u32 padding[3]; 890 }; 891 892 #define KVM_HYPERV_CONN_ID_MASK 0x00ffffff 893 #define KVM_HYPERV_EVENTFD_DEASSIGN (1 << 0) 894 895 /* 896 * Masked event layout. 897 * Bits Description 898 * ---- ----------- 899 * 7:0 event select (low bits) 900 * 15:8 umask match 901 * 31:16 unused 902 * 35:32 event select (high bits) 903 * 36:54 unused 904 * 55 exclude bit 905 * 63:56 umask mask 906 */ 907 908 #define KVM_PMU_ENCODE_MASKED_ENTRY(event_select, mask, match, exclude) \ 909 (((event_select) & 0xFFULL) | (((event_select) & 0XF00ULL) << 24) | \ 910 (((mask) & 0xFFULL) << 56) | \ 911 (((match) & 0xFFULL) << 8) | \ 912 ((__u64)(!!(exclude)) << 55)) 913 914 #define KVM_PMU_MASKED_ENTRY_EVENT_SELECT \ 915 (__GENMASK_ULL(7, 0) | __GENMASK_ULL(35, 32)) 916 #define KVM_PMU_MASKED_ENTRY_UMASK_MASK (__GENMASK_ULL(63, 56)) 917 #define KVM_PMU_MASKED_ENTRY_UMASK_MATCH (__GENMASK_ULL(15, 8)) 918 #define KVM_PMU_MASKED_ENTRY_EXCLUDE (_BITULL(55)) 919 #define KVM_PMU_MASKED_ENTRY_UMASK_MASK_SHIFT (56) 920 921 /* for KVM_{GET,SET,HAS}_DEVICE_ATTR */ 922 #define KVM_VCPU_TSC_CTRL 0 /* control group for the timestamp counter (TSC) */ 923 #define KVM_VCPU_TSC_OFFSET 0 /* attribute for the TSC offset */ 924 925 /* x86-specific KVM_EXIT_HYPERCALL flags. */ 926 #define KVM_EXIT_HYPERCALL_LONG_MODE _BITULL(0) 927 928 #define KVM_X86_DEFAULT_VM 0 929 #define KVM_X86_SW_PROTECTED_VM 1 930 #define KVM_X86_SEV_VM 2 931 #define KVM_X86_SEV_ES_VM 3 932 #define KVM_X86_SNP_VM 4 933 #define KVM_X86_TDX_VM 5 934 935 /* Trust Domain eXtension sub-ioctl() commands. */ 936 enum kvm_tdx_cmd_id { 937 KVM_TDX_CAPABILITIES = 0, 938 KVM_TDX_INIT_VM, 939 KVM_TDX_INIT_VCPU, 940 KVM_TDX_INIT_MEM_REGION, 941 KVM_TDX_FINALIZE_VM, 942 KVM_TDX_GET_CPUID, 943 944 KVM_TDX_CMD_NR_MAX, 945 }; 946 947 struct kvm_tdx_cmd { 948 /* enum kvm_tdx_cmd_id */ 949 __u32 id; 950 /* flags for sub-commend. If sub-command doesn't use this, set zero. */ 951 __u32 flags; 952 /* 953 * data for each sub-command. An immediate or a pointer to the actual 954 * data in process virtual address. If sub-command doesn't use it, 955 * set zero. 956 */ 957 __u64 data; 958 /* 959 * Auxiliary error code. The sub-command may return TDX SEAMCALL 960 * status code in addition to -Exxx. 961 */ 962 __u64 hw_error; 963 }; 964 965 struct kvm_tdx_capabilities { 966 __u64 supported_attrs; 967 __u64 supported_xfam; 968 __u64 reserved[254]; 969 970 /* Configurable CPUID bits for userspace */ 971 struct kvm_cpuid2 cpuid; 972 }; 973 974 struct kvm_tdx_init_vm { 975 __u64 attributes; 976 __u64 xfam; 977 __u64 mrconfigid[6]; /* sha384 digest */ 978 __u64 mrowner[6]; /* sha384 digest */ 979 __u64 mrownerconfig[6]; /* sha384 digest */ 980 981 /* The total space for TD_PARAMS before the CPUIDs is 256 bytes */ 982 __u64 reserved[12]; 983 984 /* 985 * Call KVM_TDX_INIT_VM before vcpu creation, thus before 986 * KVM_SET_CPUID2. 987 * This configuration supersedes KVM_SET_CPUID2s for VCPUs because the 988 * TDX module directly virtualizes those CPUIDs without VMM. The user 989 * space VMM, e.g. qemu, should make KVM_SET_CPUID2 consistent with 990 * those values. If it doesn't, KVM may have wrong idea of vCPUIDs of 991 * the guest, and KVM may wrongly emulate CPUIDs or MSRs that the TDX 992 * module doesn't virtualize. 993 */ 994 struct kvm_cpuid2 cpuid; 995 }; 996 997 #define KVM_TDX_MEASURE_MEMORY_REGION _BITULL(0) 998 999 struct kvm_tdx_init_mem_region { 1000 __u64 source_addr; 1001 __u64 gpa; 1002 __u64 nr_pages; 1003 }; 1004 1005 #endif /* _ASM_X86_KVM_H */ 1006